nuclei-templates/http/cves/2019/CVE-2019-13101.yaml

49 lines
1.8 KiB
YAML

id: CVE-2019-13101
info:
name: D-Link DIR-600M - Authentication Bypass
author: Suman_Kar
severity: critical
description: D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page.
impact: |
An attacker can bypass authentication and gain unauthorized access to the router's settings, potentially leading to further compromise of the network.
remediation: |
Update the router's firmware to the latest version provided by D-Link.
reference:
- https://github.com/d0x0/D-Link-DIR-600M
- https://www.exploit-db.com/exploits/47250
- https://nvd.nist.gov/vuln/detail/CVE-2019-13101
- https://us.dlink.com/en/security-advisory
- http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2019-13101
cwe-id: CWE-306
epss-score: 0.0359
epss-percentile: 0.9142
cpe: cpe:2.3:o:dlink:dir-600m_firmware:3.02:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: dlink
product: dir-600m_firmware
tags: cve2019,cve,packetstorm,edb,dlink,router,iot
http:
- raw:
- |
GET /wan.htm HTTP/1.1
Host: {{Hostname}}
Origin: {{BaseURL}}
matchers-condition: and
matchers:
- type: word
part: body
words:
- "/PPPoE/"
- type: status
status:
- 200
# digest: 4a0a00473045022100c6013aa930559e818c237f42a76be0a2dbdb05aa0aea9954127e7ffa9a3d33000220709875e5f3a3dbc0dea93d6fe4083ffd49bb89ec74a2bc1837766a7ffb3f07b1:922c64590222798bb761d5b6d8e72950